Summary of Corrective Powers to be Exercised

a. A reprimand pursuant to Article 58(2)(b); and

b. An order to bring processing operations into compliance, pursuant to Article 58(2)(d), in the terms set out at Appendix C hereto; and

c. An administrative fine, pursuant to Articles 58(2)(i) and 83, addressed to WhatsApp, in the amount of €225 million. For the avoidance of doubt, that fine reflects the infringements that were found to have occurred, as follows:

i. In respect of the infringement of Article 5(1)(a) of the GDPR, a fine of €90 million; ii. In respect of the infringement of Article 12 of the GDPR, a fine of €30 million; iii. In respect of the infringement of Article 13 of the GDPR, a fine of €30 million; and iv. In respect of the infringement of Article 14 of the GDPR, a fine of €75 million.

This Decision is addressed to:

WhatApp Ireland Limited 4 Grand Canal Square Grand Canal Harbour Dublin 2

Dated the 20th day of August 2021

Decision-Maker for the Commission:

[Sent electronically without signature]

_______________________________________ Helen Dixon Commissioner for Data Protection